Hadrian
Hadrian is a paid offensive security platform used to find and validate exploitable external exposures and run AI pentests for enterprise security teams.
Cybersecurity tools, platforms and training
A curated directory of cybersecurity tools, platforms and training for practitioners, researchers and learners.
Top voted
Gitleaks
Gitleaks is a free open-source secret scanner used to detect hardcoded passwords, API keys, and tokens in git repos and files for security and dev teams.
subfinder
subfinder is a free passive subdomain discovery tool used to enumerate valid subdomains from online sources for bug bounty hunters and recon teams.
Pacu
Pacu is a free open-source AWS exploitation framework used to test Amazon Web Services accounts for cloud penetration testers working with authorization.
Checkov
Checkov is a free static analysis tool used to find misconfigurations in infrastructure as code and open source packages for cloud and DevSecOps teams.
Sliver
Sliver is a free open-source command and control framework used to run adversary emulation and red team operations for authorized security testers.
Caldera
Caldera is a free automated adversary emulation platform used to run ATT&CK-based security tests for red teams and defenders validating their controls.
Atomic Red Team
Atomic Red Team is a free library of small ATT&CK-mapped tests used to validate detection and response coverage for blue teams and detection engineers.
Sigma
Sigma is a free open signature format used to write and share platform-neutral detection rules across SIEM tools for detection engineers and threat hunters.
drozer
drozer is a free dynamic analysis framework used to probe Android app IPC and attack surface for mobile security testers assessing devices they own.
Apktool
Apktool is a free reverse engineering tool used to decode and rebuild Android APK resources and smali code for mobile app security reviewers.
Bettercap
Bettercap is a free open-source network attack framework used to run recon and MITM tests on Wi-Fi, BLE, and IP networks for authorized security testers.
Kismet
Kismet is a free open-source wireless sniffer and WIDS used to detect Wi-Fi, Bluetooth, and RF devices for network defenders and authorized testers.
Aircrack-ng
Aircrack-ng is a free open-source Wi-Fi security suite used to capture traffic and test WEP and WPA keys for authorized testers auditing wireless networks.
TheHive
TheHive is a freemium incident response platform used to manage security cases, alerts, and tasks for SOC, CSIRT, and CERT teams working together.
Plaso
Plaso is a free open-source timeline tool used to extract timestamped events from disk images and logs for digital forensic investigators and analysts.
KAPE
KAPE is a free Windows triage tool used to collect and parse forensic artifacts quickly for government, education, and internal company incident responders.
PyRIT
PyRIT is a free open-source AI red-teaming framework used to identify risks in generative AI systems for security professionals and engineers.
Promptfoo
Promptfoo is a freemium open-source CLI and library used to evaluate and red-team LLM applications and agents for developers and security teams.
garak
garak is a free open-source LLM vulnerability scanner used to probe language models for security weaknesses during authorized red-team tests.
Verno Labs
Verno Labs is a paid AI agent security platform used to red-team and monitor AI agents you are authorized to test, built for enterprise security teams.
Wazuh
Wazuh is an open-source XDR and SIEM platform used to detect and investigate threats on endpoints, free to self-host, with a paid cloud service.
OpenCTI
OpenCTI is an open-source threat intelligence platform used to store and link cyber knowledge, free under its own Apache 2.0 Community Edition.
Web Security Academy
Web Security Academy is a free online training site used to practice legal web application security labs, built by the makers of Burp Suite.
Training & LabsFree